SITEC - Network Security Engineer - MacDill AFB

Peraton Overview Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Responsibilities Peraton requires Network Security Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at Mac Dill AFB in Florida.   The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (Net Ops);

maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. The Network Security Engineer will serve as the primary technical authority for the design, implementation, and management of the enterprise network security boundary, with a dedicated focus on Next-Generation Firewalls (NGFW) and Intrusion Prevention Systems (IPS).

Operating at the critical intersection of network operations and cybersecurity, this role specializes in engineering, configuring, and optimizing Cisco Firewall Management Center (FMC) and Firewalls Threat Defense (FTD) to enforce robust security postures. The engineer will collaborate closely with Network Infrastructure teams and the Zero Trust (ZT) working group to translate high-level security architectures into concrete firewall rules, micro-segmentation boundaries, and threat prevention policies.

This role ensures that active defense measures, secure data flows, and rigorous policy enforcement are seamlessly integrated across highly complex, mission-critical networks.

Engineer and Administer Cisco NGFW

Infrastructure: Lead the deployment, configuration, and continuous optimization of Cisco Firepower Threat Defense (FTD) firewalls and Firewall Management Center (FMC) platforms across the enterprise.

Zero Trust Policy Enforcement:
Partner with the Zero Trust (ZT) team to translate architectural blueprints into actionable access control lists (ACLs), security zones, and micro-segmentation policies within the firewall infrastructure.

IPS/IDS and Policy Optimization:
Design, deploy, and tune Intrusion Prevention and Detection System (IPS/IDS) policies, SSL/TLS decryption rules, and URL filtering within Cisco FMC to block advanced threats while maintaining operational network performance.

Network Engineer

Collaboration:

Provide technical escort and security review for Network Engineers; ensure all routing, switching, and transport changes conform to established network security boundaries and security policies.

Rule Lifecycle & STIG…